chore(deps): security upgrade for dependencies

README.md

@@ -21,7 +21,7 @@ The latest version (built with JDK 1.8) can be found on [Maven Central](https://
 ### Gradle
 
 ```groovy
-implementation("io.github.tronprotocol:trident:0.11.0")
+implementation("io.github.tronprotocol:trident:1.0.0")
 ```
 
 ### Maven
@@ -32,7 +32,7 @@ Add repo setting:
 <dependency>
   <groupId>io.github.tronprotocol</groupId>
   <artifactId>trident</artifactId>
-  <version>0.11.0</version>
+  <version>1.0.0</version>
 </dependency>
 ```
 
@@ -45,21 +45,24 @@ You can use locally built packages by the following steps:
 2. Add the following to your project's `build.gradle`:
 ```groovy
 dependencies {
-    implementation files('libs/trident-0.11.0.jar')
+    implementation files('libs/trident-1.0.0.jar')
     implementation "com.google.guava:guava:33.0.0-jre"
-    implementation "io.grpc:grpc-netty-shaded:1.75.0"
-    implementation "io.grpc:grpc-netty:1.75.0"
-    implementation "io.grpc:grpc-okhttp:1.75.0"
-    implementation "io.grpc:grpc-protobuf:1.75.0"
-    implementation "io.grpc:grpc-stub:1.75.0"
+    implementation "io.grpc:grpc-netty-shaded:1.81.0"
+    implementation "io.grpc:grpc-netty:1.81.0"
+    implementation "io.grpc:grpc-okhttp:1.81.0"
+    implementation "io.grpc:grpc-protobuf:1.81.0"
+    implementation "io.grpc:grpc-stub:1.81.0"
     implementation "com.google.protobuf:protobuf-java-util:3.25.8"
-    implementation "org.bouncycastle:bcprov-jdk18on:1.78.1"
-    implementation "io.vertx:vertx-core:4.5.21"
-    implementation "io.netty:netty-all:4.1.125.Final"
+    implementation "org.bouncycastle:bcprov-jdk18on:1.84"
+    implementation "io.vertx:vertx-core:4.5.27"
+    implementation platform("io.netty:netty-bom:4.1.133.Final")
+    implementation "io.netty:netty-buffer"
     implementation "com.alibaba.fastjson2:fastjson2:2.0.55"
 }
 ```
 
+> **Note:** If your code directly uses other netty modules (e.g. `io.netty.channel.*`, `io.netty.handler.*`, `io.netty.codec.*`), add the corresponding artifact after the BOM without specifying a version — the version will be resolved by `netty-bom`. For example: `implementation "io.netty:netty-handler"`.
+
 ## Quick Start
 
 **Initialize client**
@@ -120,4 +123,4 @@ Starting from version 0.9.2, releases are published to Maven repository and sign
 ```
 pub: 3149 FCA5 6377 2D11 2624 9C36 CC3F 8CEA 7B0C 74D6
 uid: buildtrident@tron.network
-```
+```

build.gradle

@@ -1,4 +1,4 @@
-def DEFAULT_VERSION = '0.11.0'
+def DEFAULT_VERSION = '1.0.0'
 def DEFAULT_GROUP = 'io.github.tronprotocol'
 
 buildscript {
@@ -20,6 +20,9 @@ buildscript {
     configurations.classpath {
         resolutionStrategy {
             force("commons-io:commons-io:2.18.0")
+            force("org.apache.logging.log4j:log4j-api:2.25.4")
+            force("org.apache.logging.log4j:log4j-core:2.25.4")
+            force("org.codehaus.plexus:plexus-utils:3.6.1")
         }
     }
 }
@@ -30,9 +33,12 @@ apply plugin: 'com.github.johnrengelman.shadow'
 apply plugin: 'maven-publish'
 
 ext {
-    bouncycastleVersion = '1.78.1'
+    bouncycastleVersion = '1.84'
     junitJupiterVersion = '5.4.2'
     googleGuavaVersion = '33.0.0-jre'
+    jacksonVersion = '2.18.6'
+    nettyVersion = '4.1.133.Final'
+    vertxVersion = '4.5.27'
 }
 
 allprojects {
@@ -74,10 +80,8 @@ allprojects {
     configurations.configureEach {
         resolutionStrategy {
             force("com.google.guava:guava:$googleGuavaVersion")
+            force("com.fasterxml.jackson.core:jackson-core:$jacksonVersion")
             force("com.squareup.okio:okio:3.9.0")
-            force("io.netty:netty-codec:4.1.125.Final")
-            force("io.netty:netty-codec-http:4.1.125.Final")
-            force("io.netty:netty-codec-http2:4.1.125.Final")
             force("commons-beanutils:commons-beanutils:1.11.0")
         }
     }
@@ -98,6 +102,7 @@ subprojects {
     }
 
     dependencies {
+        implementation platform("io.netty:netty-bom:$nettyVersion")
         testImplementation "org.junit.jupiter:junit-jupiter:$junitJupiterVersion"
 
         compileOnly 'org.projectlombok:lombok:1.18.34'

core/build.gradle

@@ -6,7 +6,7 @@ plugins {
 description 'Trident-Java gRPC core classes'
 
 def protobufVersion = '3.25.8'
-def grpcVersion = '1.75.0'
+def grpcVersion = '1.81.0'
 def protocGenVersion = '1.60.0' // https://github.com/grpc/grpc-java/pull/11371 , 1.64.x is not supported CentOS 7.
 
 dependencies {